fa136aabc1877618f29e0c1167222eff58005b70a4b498a8a0e3a37530856dd8

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 06:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
new-update.html
Size 261B
Sample260819-hlblgsdf65
SHA256 fa136aabc1877618f29e0c1167222eff58005b70a4b498a8a0e3a37530856dd8
MD5 320d5a0104a682ab5102f289e28cded9
SHA1 d6109ae20512c9d02cf0b1bd1a16de432c68741b
SHA512 4f5d8244454eee525e9e38b631fbec3bf09a430eaad59b1d6364aae83f9244575c1e01db970799c0a011051cdcf11c5f0c5da8ac8a9b54c03f25b68c7e1d0f62
TLSH
T1EED02BD7284080466B70B3D45DA0B22C4857745E69C6D511A4D030BA88A4B25C803586
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5852	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315957551814413"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{D9D5AF4B-F557-4272-8082-B6ECDAF582D8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5596	msedge.exe
5596	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 1552	2212	msedge.exe	89
PID 2212 wrote to memory of 1424	2212	msedge.exe	90
PID 2212 wrote to memory of 5852	2212	msedge.exe	92
PID 2212 wrote to memory of 1424	2212	msedge.exe	90
PID 2212 wrote to memory of 1424	2212	msedge.exe	90
PID 2212 wrote to memory of 3452	2212	msedge.exe	93
PID 2212 wrote to memory of 3452	2212	msedge.exe	93
PID 2212 wrote to memory of 5656	2212	msedge.exe	94
PID 2212 wrote to memory of 5656	2212	msedge.exe	94
PID 2212 wrote to memory of 5656	2212	msedge.exe	94
PID 2212 wrote to memory of 3104	2212	msedge.exe	95
PID 2212 wrote to memory of 3104	2212	msedge.exe	95
PID 2212 wrote to memory of 3104	2212	msedge.exe	95
PID 2212 wrote to memory of 3360	2212	msedge.exe	96
PID 2212 wrote to memory of 4140	2212	msedge.exe	97
PID 2212 wrote to memory of 3360	2212	msedge.exe	96
PID 2212 wrote to memory of 3360	2212	msedge.exe	96
PID 2212 wrote to memory of 4140	2212	msedge.exe	97
PID 2212 wrote to memory of 4140	2212	msedge.exe	97
PID 2212 wrote to memory of 4296	2212	msedge.exe	98
PID 2212 wrote to memory of 4296	2212	msedge.exe	98
PID 2212 wrote to memory of 4296	2212	msedge.exe	98
PID 2212 wrote to memory of 1040	2212	msedge.exe	101
PID 2212 wrote to memory of 4556	2212	msedge.exe	100
PID 2212 wrote to memory of 1040	2212	msedge.exe	101
PID 2212 wrote to memory of 4556	2212	msedge.exe	100
PID 2212 wrote to memory of 3432	2212	msedge.exe	103
PID 2212 wrote to memory of 3420	2212	msedge.exe	107
PID 2212 wrote to memory of 5404	2212	msedge.exe	108
PID 2212 wrote to memory of 5976	2212	msedge.exe	109
PID 2212 wrote to memory of 2104	2212	msedge.exe	110
PID 2212 wrote to memory of 2104	2212	msedge.exe	110
PID 2212 wrote to memory of 5596	2212	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\new-update.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffeed6dc188,0x7ffeed6dc194,0x7ffeed6dc1a0
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,6126327338419818797,7916172933764480730,262144 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:2
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,4915506782218891583,7168786318480572740,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,2604586050399247935,7575723694754520353,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:13
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3552,i,2953363180420344252,13002470949215829432,2097152 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,14948540114842251449,18321412560885359964,2097152 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,15925061189897597045,2066752842254239805,2097152 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:9
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,13561350566008194005,1500547225667926834,2097152 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5328,i,6351863496574292100,3848955845534902415,2097152 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,13324535716223765345,9972111795141611385,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:14
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3792,i,15151222362495550788,14863056888686012768,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,535852238730354182,9979808267781552320,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,535852238730354182,9979808267781552320,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,14053816924970582170,17849375071774733040,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:14
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,15288564364831563125,5444893892204668237,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:14
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,2928669928780586579,5983261749169123121,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:14
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,2102546186570629566,5664405214736724654,524288 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:14
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4888,i,2768552931934995386,3641484648317530258,262144 --field-trial-handle=2860,i,5613526084961163217,7261279721055391379,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5596

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 eeef9ebd751ac57340bddd0e184828679bd2b816030f7e8b32163599491a69e1
MD5 75f9bdf898c979780e853d0520c179b0
SHA1 7ea4309e3aa64fecfa0848d070185f00d3e5592c
SHA512 bc6b63352eca063a6e3f48ae40e7119a1de3c15c186aff756cc2b1ddb3df939c7f35586f6ce0eafbb936b73d151a51d75d5b09ed777d97c520df5e98d7216945
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T173B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 085c6197210c20a11196aa4aced7b222c5d23314698ca5b8866ad69f44b425b5
MD5 0853bacf359fde731c877b668da74ee1
SHA1 729bc17144a09776bded73421ed31a925e357aee
SHA512 f7011e7429703f538ce06fa2b44e1f73bd72d9ce1489189702af012c203c7d74a7c9b7e3584b79711b89906d1a1d91c63bb18979249f5a0845c43b96f2a37da9
TLSH
T1F25151AD6B2B3ED9C7315BFAA1E1589837F7D359241FAFD24180F3724AC270150A21B1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b8b7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b8b7.TMP
Size 2KB
SHA256 08fca1e448c62684438cc235976d1c0cfb38a70e40af88ad74f87217678bf1b6
MD5 72483ae12e28348399bb78eea4405b2f
SHA1 1cabf646ebcedf4a2c90cd309335df4930a68434
SHA512 be84281b8ae1d82f2a7fd19c6f93e7dc2936575c946d6c660a773b5649802022c95186d724f7aef5e678f1bd62bfa5f4f8b0ae003a652272ede2cd170dbe4d0a
TLSH
T1305160ACAB2B3ED9C3315BFAA1E1498837F7D349241F9ED24080F3724AC270160A21B1
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 980b7af47a554d7d28a13174fd550b3a1e7f4bc0b07fe75e506c524e12232359
MD5 1a73ee3dd0b25a2b8801b4779345d600
SHA1 466fd279a5960de8be336e48fc62bb4fb82b213e
SHA512 b454e07876eb2f9798698335759ce844149ac1fced8b339f3b27a6994fbe7365955db2b0d9d8c169ada1a7e43cd55d5d899aec33e045bb4c3309a668385c57ca
TLSH
T1EB41D2F783B4857E8A0196F0EA04AE2FCF1C0515431C78AAC5E0AE2BD3F3472E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 105dfd21fb9f523626a637b9955cbb5d00fcee708d3f112cfaccc344d03f2116
MD5 0b463636b441c194581804ebd797e494
SHA1 c7067813fe81104e5c5edeca12faf784fb78fb40
SHA512 0e24feabd7c306dfb80acc81b3acba7100b58d4f395bd1a0a8e0094736d9ef5f6aacb7f728f8a3c69a19fd7cad1218dc5961efd834d856eed24ca6f560a34c46
SSDEEP 192:sxRxRCyM/jK1Ml8wbq/f2sXZ8bNzqzoA8p4oRa/g6+WNIYlzZRvuGQvIgIJ:sxRxIlq/f2sXZ8znC/5Imus
TLSH
T19562E9156A249D7BCCDBD30DFA557F93D6F85433A2941E44AAFC8A1C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 dc6ed367574395c32fce3402158c6fd4f19305d768c412c9a0bd56f6ee060f19
MD5 14753f64f9ac35aaa5050380c0d0c77e
SHA1 afa3c849bd20ab9de756bcf2e80c70edc35d30e1
SHA512 02bcce88e105e9a4f07061036b981c63462ae19c812f9a434ebda4f1b698eadefb52927896ef05ff8a1f7a5780675849ffba2604ec5ac5c2292593c64d4cecea
SSDEEP 192:sxR+RCyM/jK1Ml8UQxbq/f2s6I8bNzqzoA8peoRa/g6+WNIYlLZ/MuGQvIgDBJ:sxR+IqZq/f2s6I8znY/5IVu/
TLSH
T12F62D715A6249D77CCDBE30DFA517B93D6F85473A2941E44AAFC8A1C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5560606102884182548c061fc86da74debe041c0d168be0ef58c06ea3d02a3e1
MD5 c42cf5fa692dc9bbf95e229fc25cdb4d
SHA1 aab394c4126b3b92ac9249a951ef83dde1572234
SHA512 1fc765403fe444e4c1bb7e09d4bdec9007ef151ffb47b069880fa6edf88760f3827812a34fafeee101ea809fb61d836a528a37ef7946cffa3d6913bbcd411b27
SSDEEP 192:sxR+RCyM/jK1Ml8wbq/f2s6Z8bNzqzoA8p4oRa/g6+WNIYlzZRvuGQvIgDfJ:sxR+Ilq/f2s6Z8znC/5ImuF
TLSH
T1E662D8156A249D7BCCDBD30DFA517F93D6F85473A2941E44AAFC8A1C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 57ff7a94f7c94f5c9d02063b127d5fa13bed4b4897ebbba06d6cdfe8ba97badc
MD5 652e1a69dc8436512ec50efb4fb2eaa2
SHA1 d6ff57bd9ed356fdc1b8e114d67d7df83fa37c7e
SHA512 7b9bd6c8737a93a3d3be9d5e10eb5f1dd00229b931d723c1fa39440e81cad4c2d07fd41375a09537c5ca0ac0a52a64c7e0b3e48415b195f0da7d2d209970fbce
SSDEEP 768:dhRACxWgg+fAJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVL13fwroPcbQ:dhRACxWgg+fAJu1jaulfb0bQ
TLSH
T110C2FD3F540CCB7E4F844E9DEC29AED76DD802CB96988D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 461bc4edf387604401122c2cc614f4f61e5bb101034e6bdf84df09996361098f
MD5 d652ba422e0164237e7d640b43ed1eea
SHA1 519f691e14517bebb566f1e1b66c01546476770a
SHA512 000cf78a2ff5ec5a773418ad1ac5a12e58e72d1b161347bb84c6a1a874c8e6a4ab186c18ba9009f2f683ad4c48fc8d1e9da6def54d4dbf506db31b5daae47471
SSDEEP 96:KRlH0lHVlHAlHElH+lHilHmlHkWlHilHvlHPglelGK4lDglclGclWl+l9lMl+lXV:ClUl1lglklelClGl7lClPlYlelOlDglQ
TLSH
T1FA91F001377B52803CBE759C807D896B92C37062301AA83B7BA965725F6BE424CFF4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

cb12cf70-54c3-497c-a945-9cfd52d79d8e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cb12cf70-54c3-497c-a945-9cfd52d79d8e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 93c14485b1de23e2b051f8b2cc2dcaae3b362bbb506805fb6f78a59a2f202761
MD5 039bda92b2a407cebe9b34c2f8ebac6e
SHA1 1dba7839779b77ce752484c4e24dca0947294367
SHA512 239bfda0617d212cba3a38b955ccafa631b03681df758021567fa085c2e0568d52376f47a25fb7de884fcb4bde27795921cc81a287042b58af10c2832ec190f7
SSDEEP 768:Zrv+4UNbdi34K8iJjz7NHXmTWTbc+Hd2F:Zbsbk3kIz9eWn192F
TLSH
T1C103CF71ECA9DE339DF69688B44B7A437EB801A3C5C41A98DDC96B4D018B19E170FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 b276cfba64672352ff96fb1fa9da72b9808193220ad744ca30c8c9ea3b2a6dbe
MD5 238ab8807ede78a89bb37fcb4802f198
SHA1 272a362b02a039c618c7d6acb4176d975d4d8603
SHA512 6df081a17c2ef41b1d069f4971285ab3ec31e4e1e89931efff97457c43815982cb8cfa830a6f30abab26320e8e01b90675fd116828773d8dad7351b58a7c51d3
SSDEEP 384:zZcIR38NokL6OTcrAzRfY9bY2RzrAvQPlLJQXmIkdP9IimIMWEfMbc+HdfvIu/8z:rR3Xx8iJjz7NHXmTWTbc+Hdfguq
TLSH
T1F5F2D070ECA19E335CEAD788B50B7A52AEF40073D5C82A88D9DDAB0E014719D171BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 39749757e5d112e9f047e713fe2644bf7d97531e1d856e225a1c6b4a1eebfc66
MD5 67113bd1eaeae50139e42d626f5d0db1
SHA1 98191033841afcd7d23fa6f2ca9167527a0998e6
SHA512 3bdbadf7584a206f17ea070b5f8632ea4490a294fc7443d5d162ccb045e358314cd850b8894dabc06fe2f4e11df81fd23a3c434d3df59e46377c6de1c6233046
SSDEEP 384:7VZcIR38NoDL6OTcrAzRfY9bY2RzrAvQPlLJQXmIkdP9IimIMWEfMbc+HdfvIu/i:5R3Qx8iJjz7NHXmTWTbc+Hdfguq
TLSH
T1EEF2D070ECA19E335CEAD788B54B7A52BEF40073D5C81A88D9DDAB0E014769D171BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6661b579ea09eba5cfbc87666a4d6c0459e34eaf35bd74f647c92e60ddf4a839
MD5 5c5a6f27b898c31c94bc6a0f5474deee
SHA1 0a87cbf533494db8abba02e5414735b0cb5d15b4
SHA512 96c9f53569129ecd67408da2e6645947c5cb0d6d1198b24d15c8fc438cdd2e6b65346e8e19cf33a465041d6eb4704f42da00e537eeae7b58b00fcc556dc60eef
SSDEEP 384:DniFiZcIo38NY8TUNTUlIlDL6OThrAzRfY9bY2RzrALQPlLJQXmIkdP9IimIMWEp:GFQo33wgI88iJjzNNHXmTWTbc+Hdfguq
TLSH
T12A135AF198D78937DDAD9B87A73E2E119EBCC063B4841554BBC85A0DCC461BFC30A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9dc8eab283ea5dea9f2ae4aef6679988dd7632013f9a1caa569cc7848c3d73b0
MD5 c53078b644129fd1f8c96dfb2cb9d72d
SHA1 b2b8a89f2357d72f29a94c5e940592f922e69651
SHA512 c2f1473d08f6d2743bb840b2d0b251269006ecb08446f1a0956a9c344b7d14c30f37dcf9ffe1d72588e1ffebdccb585e4bf62c202da08f907fcae29f0a3ccd69
SSDEEP 768:arv+4UNbdM3ENCiJjznNHXmTWTbc+/QeVH1SvyZ:absb+3BIzxeWn1IEH1dZ
TLSH
T18303CF329CA98F37ADF69788744BBA573EF8116385C40B88C8D96F4E429748D170BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ee3f8d28a0ade88d09fe6dba5d724165c4583e6e8377bd24f57d351c8fe1b4ee
MD5 c7f040e97f0c1c1307449594570913f2
SHA1 30fe1dbbc72b04f5e3f9023ca2aa3f776b4afee9
SHA512 6351dd5b3bcf221c6cfb99d2daa6ff778c4e26849ebe6a51afa025722c36615a444149744fbab14a244598827a8196ae749bedfcbef6a79a6111354d82eea8e3
SSDEEP 768:Xrv+4UNbdM3b4aiJjzoNHXmTWTbc+edeVH1SvyZ:Xbsb+3VIzIeWn1yEH1dZ
TLSH
T17E03CF31DCA99E37ADF69788B44BBA573EF8116385C40A94C8D96F4E428B08D131BD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download